Back to ChoiceLens Home
C
ChoiceLens

Privacy Policy

Last Updated: September 2026

1. Overview

ChoiceLens is an application developed by Edglance LLC ("we", "our", or "us"). We are committed to transparency and adopt a privacy-minded design. This Privacy Policy outlines the types of data we collect, how it is processed, and your rights concerning that information when you use the ChoiceLens mobile application and its associated backend services.

2. Information Collection and Processing

ChoiceLens collects and processes information to verify your profile preferences and deliver personalized food verdicts. The specific categories of data processed include:

A. On-Device Image Processing (Local)

When you point the app's camera at a product barcode or ingredient panel, the image extraction and Optical Character Recognition (OCR) are performed entirely locally on your device using Apple-native VisionKit frameworks. Raw camera video feeds or captured photos are not uploaded to our servers or stored in our databases. Only the extracted barcode digits or OCR text strings are transmitted to our backend for analysis.

B. Account and Profile Data

To synchronize preferences across your devices, we require authentication.

  • Authentication: We use Sign in with Apple as the primary login path. This provides your unique identifier, email (or an Apple-obfuscated relay address if you use "Hide My Email"), and name.
  • Preferences: We store your self-selected primary nutritional goal (e.g., weight loss, muscle gain, maintain health) along with toggle settings for priorities (e.g., protein, sugar, sodium) and health watch-outs (e.g., blood sugar, cholesterol). We do not collect medical history, age, height, weight, or body fat percentages.

C. Scan History and Saved Products

When you scan a product, the associated barcode, product name, and verdict history are saved on our secure backend database to display your scan history and bookmarked products in the app.

D. Product Lookup Diagnostics

When a scan cannot be matched to a product, we record the barcode, what the outcome was, and which lookup source was attempted, together with your account identifier or the anonymous install identifier described below. We use this only to find and fix barcodes the app fails to resolve. It contains no camera imagery.

E. Product Analytics and Install Attribution

To understand how people move through the app, and which advertising brought them to it, we record a small set of first-party analytics events.

  • Anonymous install identifier: a random identifier generated on your device the first time the app runs and stored locally. It is not Apple's advertising identifier (IDFA) and is not derived from your device hardware. Deleting and reinstalling the app produces a new one.
  • Funnel events: we record when an account is created, when your first scan happens, progress through onboarding steps, when a subscription screen is shown, and when a subscription begins, along with the plan involved and which screen prompted it. These are linked to your account and to the install identifier.
  • Apple Search Ads attribution: if you arrived from an Apple Search Ads campaign, the app passes Apple's attribution token to our backend, which exchanges it with Apple for campaign, ad group, keyword and click-date information and stores that alongside your account. We store only a one-way hash of the token itself, never the token. If you did not arrive from an ad, no attribution record is created.

This processing is first-party. These events go only to our own backend and to Apple's attribution service. ChoiceLens contains no third-party advertising or analytics SDKs, does not track you across other companies' apps or websites, and does not sell or share this data for advertising purposes.

3. AI Provider Integration and Data Flow

To generate verdicts, explain complex ingredients, identify food alternatives, and answer follow-up questions in the "Ask Lens" chat mode, ChoiceLens utilizes third-party artificial intelligence (AI) sub-processors (specifically Google Gemini APIs).

What is shared: The barcode number, the raw ingredients text extracted via on-device OCR, product metadata, and your self-selected goal profile are sent to the AI provider to generate the analysis snapshot.

What is NOT shared: We do not share your personal name, primary Apple ID email, or device identifier with AI providers. The AI provider processes the product data under strict confidentiality terms and is prohibited from utilizing user scan parameters to train public foundation models.

4. Subscription and Payment Processing

ChoiceLens uses RevenueCat and Apple App Store in-app purchases to manage subscriptions. All transaction events (such as renewals, cancellations, or upgrades) are processed directly through Apple and synchronized with RevenueCat. We store an entitlement tier token (e.g., Free, Pro, Admin) linked to your anonymized user identifier to grant access to daily AI verdict thresholds. We do not access, store, or process credit card numbers or billing addresses.

5. Data Sharing and Third-Party Subprocessors

We do not sell or lease your data to third parties. We share data only with the following subprocessors necessary to deliver the core service:

  • Supabase: For cloud hosting, database storage, and secure authentication management.
  • Google Gemini API: For processing ingredients list text to output food verdicts, reasons, and chat answers.
  • RevenueCat: For synchronizing subscription entitlement states and transaction events.
  • Apple App Store: For in-app purchase validation.
  • Apple Ads Attribution: For exchanging an Apple-issued attribution token for the campaign details of an ad you tapped, where applicable.

6. Data Retention and Deletion Rights

We retain user data as long as your account remains active.

Account Deletion: You can delete all your stored data, preferences, saved items, and scan history at any time by going to the app's Profile > Account section and selecting Delete Account. This action triggers a cascade transaction that deletes all database rows associated with your user ID and requests the deletion of your authentication credentials from our database.

7. Children's Privacy

ChoiceLens is not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided personal information, please contact us immediately to purge the data.

8. Contact Information

For any questions regarding this Privacy Policy or our data processing practices, please contact us at: support@edglance.com.